Skip to content
OpenAdvisories
Medium ELSA-2026-0458 1 CVE

Moderate: libpq security update (Oracle Linux 9)

Published Jan 12, 2026 · Updated Jan 12, 2026

Ecosystem: Oracle Linux

Summary

[13.23-1]
- Rebase to upstream release 13.23
- Resolves: RHEL-131279 (CVE-2025-12818)

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 9 libpq 0:13.23-1.el9_7
Oracle Linux · 9 libpq-devel 0:13.23-1.el9_7

Vulnerabilities 1

  • Medium 5.9
    CVE-2025-12818

    PostgreSQL libpq undersizes allocations, via integer wraparound

    Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for …

    rust postgresql-9.3 postgresql15 postgresql-9.5 Debian Ubuntu Azure Linux Alpine